www.northernfunds.com
- Northern Trust Corporation -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 0b:de:1a:61:ce:a5:f5:58:e7:87:7d:ae:c4:e2:b4:87 was issued on by DigiCert Inc.
With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Northern Trust Corporation
Organization:
Northern Trust Corporation
Organization unit: Information Security
Organization unit: Information Security
State / Province:
Illinois
Locality: Chicago
Country: US
Locality: Chicago
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:de:1a:61:ce:a5:f5:58:e7:87:7d:ae:c4:e2:b4:87Serial Number (int): 15774732947964808565766138105314849927
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 2d:d9:c2:83:ee:f7:83:a5:10:bb:4b:2e:79:ac:96:95:82:6c:8a:3f
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): cd:eb:e8:ea:d5:7d:51:14:56:8f:0d:4e:95:d6:35:2a:2e:2b:fd:73
Fingerprint (sha256): 3d:91:57:be:7f:28:0a:98:3f:ad:c0:2b:d8:2b:e7:79:ae:f7:3c:5d:5d:f4:93:03:fd:71:72:8e:c9:19:2f:96
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate www.northernfunds.com
87
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.northernfunds.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.northernfunds.com
northernfunds.com
www03110.ntrs.com
developers.ntrs.com
cdn.ntrs.com
ts8.northerntrust.com
advisors.flexshares.com
cdn2.ntrs.com
myplace.ntrs.com
www04410.ntrs.com
www07510.ntrs.com
podcast.northerntrust.com
www06810.ntrs.com
corporate.northerntrust.com
web-xp2i-pws.ntrs.com
web-xp3s-cdn.ntrs.com
developers.northerntrust.com
web-xp3b-pws.ntrs.com
www10910.ntrs.com
www05410.ntrs.com
www.col.ntrs.com
www-ac.ntrs.com
omnium-investor.ntrs.com
developer.northerntrust.com
ofx.ntrs.com
idf.ntrs.com
m.ntrs.com
www08610.ntrs.com
wwwptl09-r5.ntrs.com
fgr.northerntrust.com
www02410.ntrs.com
corporate.podcast.northerntrust.com
www-ac.northerntrust.com
web-xp3i-pws.ntrs.com
www09810.ntrs.com
www.flexshares.com
www04510.ntrs.com
www11910.ntrs.com
www06310.ntrs.com
cdn.northerntrust.com
ts8.northerntrustopen.com
ts8.flexshares.com
www99910.ntrs.com
www00410.ntrs.com
web-xp3a-pws.ntrs.com
ts8.50southcapital.com
www04210.ntrs.com
www53483.ntrs.com
omnium.ntrs.com
www00210.ntrs.com
www.northerninstitutionalfunds.com
ts8-ac.northerntrust.com
www00810.ntrs.com
omnium-fo.ntrs.com
omniumdemo.ntrs.com
www10410.ntrs.com
wwww119.ntrs.com
campaign.northerntrust.com
tsp.ntrs.com
www03610.ntrs.com
www04110.ntrs.com
www06710.ntrs.com
www.thenortherntrust.com
www08210.ntrs.com
www01710.ntrs.com
www.northerntrustinvestments.com
m.northerntrust.com
mobile.northerntrust.com
omnium2.ntrs.com
www12010.ntrs.com
ts8.m.northerntrust.com
luxjobs.northerntrust.com
www02810.ntrs.com
www09910.ntrs.com
ts8.fgr.northerntrust.com
ts8.rfp.northerntrust.com
rfp.northerntrust.com
developer.ntrs.com
www.northerntrust.com
www02510.ntrs.com
www01010.ntrs.com
cdn2.northerntrust.com
www02110.ntrs.com
wwwc008.ntrs.com
omnium-investorportal.ntrs.com
nsr.dw.ntrs.com
web-xp3p-cdn.ntrs.com
northernfunds.com
www03110.ntrs.com
developers.ntrs.com
cdn.ntrs.com
ts8.northerntrust.com
advisors.flexshares.com
cdn2.ntrs.com
myplace.ntrs.com
www04410.ntrs.com
www07510.ntrs.com
podcast.northerntrust.com
www06810.ntrs.com
corporate.northerntrust.com
web-xp2i-pws.ntrs.com
web-xp3s-cdn.ntrs.com
developers.northerntrust.com
web-xp3b-pws.ntrs.com
www10910.ntrs.com
www05410.ntrs.com
www.col.ntrs.com
www-ac.ntrs.com
omnium-investor.ntrs.com
developer.northerntrust.com
ofx.ntrs.com
idf.ntrs.com
m.ntrs.com
www08610.ntrs.com
wwwptl09-r5.ntrs.com
fgr.northerntrust.com
www02410.ntrs.com
corporate.podcast.northerntrust.com
www-ac.northerntrust.com
web-xp3i-pws.ntrs.com
www09810.ntrs.com
www.flexshares.com
www04510.ntrs.com
www11910.ntrs.com
www06310.ntrs.com
cdn.northerntrust.com
ts8.northerntrustopen.com
ts8.flexshares.com
www99910.ntrs.com
www00410.ntrs.com
web-xp3a-pws.ntrs.com
ts8.50southcapital.com
www04210.ntrs.com
www53483.ntrs.com
omnium.ntrs.com
www00210.ntrs.com
www.northerninstitutionalfunds.com
ts8-ac.northerntrust.com
www00810.ntrs.com
omnium-fo.ntrs.com
omniumdemo.ntrs.com
www10410.ntrs.com
wwww119.ntrs.com
campaign.northerntrust.com
tsp.ntrs.com
www03610.ntrs.com
www04110.ntrs.com
www06710.ntrs.com
www.thenortherntrust.com
www08210.ntrs.com
www01710.ntrs.com
www.northerntrustinvestments.com
m.northerntrust.com
mobile.northerntrust.com
omnium2.ntrs.com
www12010.ntrs.com
ts8.m.northerntrust.com
luxjobs.northerntrust.com
www02810.ntrs.com
www09910.ntrs.com
ts8.fgr.northerntrust.com
ts8.rfp.northerntrust.com
rfp.northerntrust.com
developer.ntrs.com
www.northerntrust.com
www02510.ntrs.com
www01010.ntrs.com
cdn2.northerntrust.com
www02110.ntrs.com
wwwc008.ntrs.com
omnium-investorportal.ntrs.com
nsr.dw.ntrs.com
web-xp3p-cdn.ntrs.com
Other certificates including the domain name northernfunds.com
(limited to 100 certificates)
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northerntrust.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northerntrust.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
Certificate
The complete raw certificate details for www.northernfunds.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMejCCC2KgAwIBAgIQC94aYc6l9Vjnh32uxOK0hzANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xOTExMTAwMDAwMDBaFw0yMTAyMDgxMjAwMDBaMIGWMQswCQYDVQQGEwJVUzER MA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xIzAhBgNVBAoTGk5v cnRoZXJuIFRydXN0IENvcnBvcmF0aW9uMR0wGwYDVQQLExRJbmZvcm1hdGlvbiBT ZWN1cml0eTEeMBwGA1UEAxMVd3d3Lm5vcnRoZXJuZnVuZHMuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Cc0JmimiO6cRiYwhSQ7WTpQQ8wzdq2q pa6xDEGejOfdNyIIBH1hAQVXGARJcb+6OexrJkYHm6040Cw8gKNPb0LgDMZv0u7m Q2OQXdGWVAEmF1BfpD4dXrKYcXU9YhvOaRgqpLsbjbBboiT0BeL7hIe95mgHFHEa P0uFVJjxP53Y0e1K9aoifwmyZiJtCsWG2XTXeDU2r57xTuT2AAFk/ZaER4Cpivgk 43aGhQ0wzmC9r8bQHiba+Won0uGpPd7xAxlyhjOg0Uv8mwjz2uUDVjBv5vxhblJc ZTbKweb58Bh8pzqFuUzp/rKQ+KJ+eybIXbnUH7X2S2lscJylg+aw3QIDAQABo4II +TCCCPUwHwYDVR0jBBgwFoAUkFj/sJx1qFFUd7Ht8qNDFjiebMUwHQYDVR0OBBYE FC3ZwoPu94OlELtLLnmslpWCbIo/MIIHXQYDVR0RBIIHVDCCB1CCFXd3dy5ub3J0 aGVybmZ1bmRzLmNvbYIRbm9ydGhlcm5mdW5kcy5jb22CEXd3dzAzMTEwLm50cnMu Y29tghNkZXZlbG9wZXJzLm50cnMuY29tggxjZG4ubnRycy5jb22CFXRzOC5ub3J0 aGVybnRydXN0LmNvbYIXYWR2aXNvcnMuZmxleHNoYXJlcy5jb22CDWNkbjIubnRy cy5jb22CEG15cGxhY2UubnRycy5jb22CEXd3dzA0NDEwLm50cnMuY29tghF3d3cw NzUxMC5udHJzLmNvbYIZcG9kY2FzdC5ub3J0aGVybnRydXN0LmNvbYIRd3d3MDY4 MTAubnRycy5jb22CG2NvcnBvcmF0ZS5ub3J0aGVybnRydXN0LmNvbYIVd2ViLXhw MmktcHdzLm50cnMuY29tghV3ZWIteHAzcy1jZG4ubnRycy5jb22CHGRldmVsb3Bl cnMubm9ydGhlcm50cnVzdC5jb22CFXdlYi14cDNiLXB3cy5udHJzLmNvbYIRd3d3 MTA5MTAubnRycy5jb22CEXd3dzA1NDEwLm50cnMuY29tghB3d3cuY29sLm50cnMu Y29tgg93d3ctYWMubnRycy5jb22CGG9tbml1bS1pbnZlc3Rvci5udHJzLmNvbYIb ZGV2ZWxvcGVyLm5vcnRoZXJudHJ1c3QuY29tggxvZngubnRycy5jb22CDGlkZi5u dHJzLmNvbYIKbS5udHJzLmNvbYIRd3d3MDg2MTAubnRycy5jb22CFHd3d3B0bDA5 LXI1Lm50cnMuY29tghVmZ3Iubm9ydGhlcm50cnVzdC5jb22CEXd3dzAyNDEwLm50 cnMuY29tgiNjb3Jwb3JhdGUucG9kY2FzdC5ub3J0aGVybnRydXN0LmNvbYIYd3d3 LWFjLm5vcnRoZXJudHJ1c3QuY29tghV3ZWIteHAzaS1wd3MubnRycy5jb22CEXd3 dzA5ODEwLm50cnMuY29tghJ3d3cuZmxleHNoYXJlcy5jb22CEXd3dzA0NTEwLm50 cnMuY29tghF3d3cxMTkxMC5udHJzLmNvbYIRd3d3MDYzMTAubnRycy5jb22CFWNk bi5ub3J0aGVybnRydXN0LmNvbYIZdHM4Lm5vcnRoZXJudHJ1c3RvcGVuLmNvbYIS dHM4LmZsZXhzaGFyZXMuY29tghF3d3c5OTkxMC5udHJzLmNvbYIRd3d3MDA0MTAu bnRycy5jb22CFXdlYi14cDNhLXB3cy5udHJzLmNvbYIWdHM4LjUwc291dGhjYXBp dGFsLmNvbYIRd3d3MDQyMTAubnRycy5jb22CEXd3dzUzNDgzLm50cnMuY29tgg9v bW5pdW0ubnRycy5jb22CEXd3dzAwMjEwLm50cnMuY29tgiJ3d3cubm9ydGhlcm5p bnN0aXR1dGlvbmFsZnVuZHMuY29tghh0czgtYWMubm9ydGhlcm50cnVzdC5jb22C EXd3dzAwODEwLm50cnMuY29tghJvbW5pdW0tZm8ubnRycy5jb22CE29tbml1bWRl bW8ubnRycy5jb22CEXd3dzEwNDEwLm50cnMuY29tghB3d3d3MTE5Lm50cnMuY29t ghpjYW1wYWlnbi5ub3J0aGVybnRydXN0LmNvbYIMdHNwLm50cnMuY29tghF3d3cw MzYxMC5udHJzLmNvbYIRd3d3MDQxMTAubnRycy5jb22CEXd3dzA2NzEwLm50cnMu Y29tghh3d3cudGhlbm9ydGhlcm50cnVzdC5jb22CEXd3dzA4MjEwLm50cnMuY29t ghF3d3cwMTcxMC5udHJzLmNvbYIgd3d3Lm5vcnRoZXJudHJ1c3RpbnZlc3RtZW50 cy5jb22CE20ubm9ydGhlcm50cnVzdC5jb22CGG1vYmlsZS5ub3J0aGVybnRydXN0 LmNvbYIQb21uaXVtMi5udHJzLmNvbYIRd3d3MTIwMTAubnRycy5jb22CF3RzOC5t Lm5vcnRoZXJudHJ1c3QuY29tghlsdXhqb2JzLm5vcnRoZXJudHJ1c3QuY29tghF3 d3cwMjgxMC5udHJzLmNvbYIRd3d3MDk5MTAubnRycy5jb22CGXRzOC5mZ3Iubm9y dGhlcm50cnVzdC5jb22CGXRzOC5yZnAubm9ydGhlcm50cnVzdC5jb22CFXJmcC5u b3J0aGVybnRydXN0LmNvbYISZGV2ZWxvcGVyLm50cnMuY29tghV3d3cubm9ydGhl cm50cnVzdC5jb22CEXd3dzAyNTEwLm50cnMuY29tghF3d3cwMTAxMC5udHJzLmNv bYIWY2RuMi5ub3J0aGVybnRydXN0LmNvbYIRd3d3MDIxMTAubnRycy5jb22CEHd3 d2MwMDgubnRycy5jb22CHm9tbml1bS1pbnZlc3RvcnBvcnRhbC5udHJzLmNvbYIP bnNyLmR3Lm50cnMuY29tghV3ZWIteHAzcC1jZG4ubnRycy5jb20wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1 MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAx OC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0 cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwdQYIKwYBBQUHAQEE aTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9Bggr BgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNB Q0EyMDE4LmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQCtfjwPX7oKD3sse871cG0Q+Zuad44CJ9NLjXR1v+0a/ZGA MvTOn4u4H46SAt/prNa7LtDhKPdB3wD47nwAoagp51V6/W5VZET3Ozhn9sOTzY/E iPgr16TgEQT/68imHXE6M722MFO4qFnZbBITB/g0QmSMGCmXaMpYmp1K1QBtK86a KkLA4iHSB8nOWfOPVEkOXvwihEYSTvyqz61I7q4+wF0aoUZeFYo6kbE8SuyK5i/d TxLUxYc2owBeq7+5HsIKnmIUuRVeDATEsTupKBVyw154w6mRz/XmEQuh28DRBiXR Ph39Xkq2vOGisnf75fNggu39UbMULZcTHiTNnhDY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Cc0JmimiO6cRiYwhSQ7 WTpQQ8wzdq2qpa6xDEGejOfdNyIIBH1hAQVXGARJcb+6OexrJkYHm6040Cw8gKNP b0LgDMZv0u7mQ2OQXdGWVAEmF1BfpD4dXrKYcXU9YhvOaRgqpLsbjbBboiT0BeL7 hIe95mgHFHEaP0uFVJjxP53Y0e1K9aoifwmyZiJtCsWG2XTXeDU2r57xTuT2AAFk /ZaER4Cpivgk43aGhQ0wzmC9r8bQHiba+Won0uGpPd7xAxlyhjOg0Uv8mwjz2uUD VjBv5vxhblJcZTbKweb58Bh8pzqFuUzp/rKQ+KJ+eybIXbnUH7X2S2lscJylg+aw 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15774732947964808565766138105314849927 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-08 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Northern Trust Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Security' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.northernfunds.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26781852723249987193129179348471473476304812492012475322187400421360713906024874745132103044402676311129931610581966219015634450977931837637381131762407249195569073308151659772026487466679173520271900044184465154083020206748864728990035837314598080910634636803859728442739345335933944113270574848038888780247620181100315372861124822733892259202939376502072324286197210577747037716775039099740591192534448103460962037922420482330696138743719279152396483708641874600276901398865089689409526690322778725660365128097891932395484784477421688808861454733327079059251240312251390058155948647464130167663434704788140241367261 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2dd9c283eef783a510bb4b2e79ac9695826c8a3f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1876 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03110.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.flexshares.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplace.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04410.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www07510.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06810.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2i-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3s-cdn.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3b-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www10910.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www05410.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.col.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-investor.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofx.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idf.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08610.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl09-r5.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgr.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02410.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.podcast.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3i-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www09810.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexshares.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04510.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www11910.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06310.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.northerntrustopen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.flexshares.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www99910.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00410.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3a-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.50southcapital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04210.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www53483.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00210.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerninstitutionalfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8-ac.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00810.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-fo.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniumdemo.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www10410.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwww119.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsp.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03610.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04110.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06710.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thenortherntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08210.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01710.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustinvestments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium2.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www12010.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.m.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxjobs.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02810.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www09910.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.fgr.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.rfp.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfp.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02510.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01010.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02110.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc008.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-investorportal.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsr.dw.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3p-cdn.ntrs.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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